Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File: HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier: cnPh8h/QucNUCICRnPDvjj+NRAuJuHnKvWI7qcAZfHs=
Subject key identifier: 70:2A:31:3A:03:53:47:67:1B:09:80:06:68:C7:CD:B3:EE:97:ED:A3
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 019D9B19CAA56F216DC1CEC89653C5E526DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number: 18CE
Signing time: Fri 17 Apr 2026 11:00:51 +0000
Manifest this update: Fri 17 Apr 2026 11:00:51 +0000
Manifest next update: Sat 18 Apr 2026 11:00:51 +0000
Files and hashes: 1: 1aorfBEtrS5GmOfmJCAhL86Ev9o.roa (hash: nVeN0o0LJkNxID8TEKJoSJ7nvDwzMLsmkaxY6SDeSaE=)
2: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: xoe1QOp3WhVQwVE9uQdNAZv3FoFIUgV8ieZld8mS82I=)
3: pho2SHykR7lwlzkVsrkUAgDx6tY.roa (hash: R7eqxqaoaYuZmK49GO/8FFTislHdo8WBuVWn/1Nu++w=)
4: yc6fB0dTyEp0nOMNxIt14wYewvg.roa (hash: q9oC20lhVIuMqPVEpkCEXpIKxa5TMW49W8VfYHcjYb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ca:a5:6f:21:6d:c1:ce:c8:96:53:c5:e5:26:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Apr 17 11:00:51 2026 GMT
Not After : Apr 18 11:00:51 2026 GMT
Subject: CN=702a313a035347671b09800668c7cdb3ee97eda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:58:12:9f:a2:fb:a4:be:5e:b6:cc:66:a6:
ef:91:18:7d:2d:59:a0:c9:36:9a:14:8c:6a:fa:0a:
d6:14:6a:d5:ca:6e:14:b5:aa:50:82:13:f8:15:99:
28:8d:b6:d5:93:92:4b:2b:ee:9f:59:42:71:62:73:
22:60:df:23:90:d0:81:c6:af:23:e5:56:5e:20:62:
29:33:5d:1d:a8:ca:0a:41:ae:0c:96:54:d0:3f:81:
54:00:b7:22:d9:f7:bd:2d:81:c8:46:c3:bc:45:61:
04:36:74:33:a6:0c:c8:2b:fb:be:5e:4b:4d:9f:fe:
04:48:50:e6:53:6c:45:30:03:6b:fa:d3:6c:0c:8e:
bc:7e:fd:5e:10:6b:f8:63:2a:ab:ae:99:fc:83:db:
59:c4:c1:cb:07:f4:0d:66:6d:00:bd:7c:43:a5:d5:
85:f0:96:57:6a:25:51:85:fd:b0:31:da:13:de:67:
59:ad:4d:a9:71:c4:d2:4a:64:ba:21:b8:cb:e1:88:
10:64:fb:54:11:cd:b6:dd:0a:fc:3a:46:fa:b3:03:
6e:81:aa:e7:b2:13:0b:ea:8a:e9:f4:ff:f5:29:7b:
d4:40:01:63:02:24:22:c9:9c:82:43:5c:b0:12:ee:
ed:99:1e:14:b0:b4:2a:42:31:c4:be:ed:16:9c:e7:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2A:31:3A:03:53:47:67:1B:09:80:06:68:C7:CD:B3:EE:97:ED:A3
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:30:3c:16:79:7a:84:09:7f:cc:16:00:dd:9b:70:d0:70:b6:
16:2f:68:63:33:87:2d:e4:0d:98:de:33:61:a7:d3:b5:35:6e:
b2:e6:45:9a:4c:cc:f9:ba:3e:7e:99:aa:f6:e2:e8:aa:26:e0:
c5:f2:c3:14:1b:f4:23:87:79:3f:3c:be:66:08:6b:e6:9a:28:
43:e9:eb:d8:6c:47:8c:b6:d7:55:53:e2:b7:26:d0:6b:df:88:
00:2f:9a:0b:d7:20:d2:ef:38:51:b9:37:74:32:95:cb:14:dd:
f9:5d:f5:bd:53:66:e9:77:b7:1e:64:76:bc:b3:b9:3d:c4:38:
fd:91:71:c6:44:b1:dc:43:0c:1b:be:1b:bc:c1:f7:8a:02:e5:
29:0a:1e:46:41:ac:70:4d:41:fc:10:e4:4c:7d:48:83:f4:c8:
ad:b2:a1:03:8a:5d:d9:ad:56:7a:6d:21:e8:f3:0c:17:54:03:
cf:22:17:bc:57:56:2c:e5:ea:1f:20:cd:10:84:61:45:62:04:
64:6f:e0:0d:66:cf:78:a0:54:26:3e:54:de:4f:b2:29:f0:a5:
e7:79:6a:a5:d0:a2:58:00:4a:88:e2:00:63:6e:c7:e3:06:d9:
89:0c:40:74:df:08:1a:44:8d:b2:a2:1e:39:a3:2f:11:0e:fe:
96:42:1c:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGcqlbyFtwc7IllPF5SbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGM1M2QxZGU3YTJlZjdlYjJiOTBjODA5MTU1NDQxNDAw
NDI0ODgwHhcNMjYwNDE3MTEwMDUxWhcNMjYwNDE4MTEwMDUxWjAzMTEwLwYDVQQD
Eyg3MDJhMzEzYTAzNTM0NzY3MWIwOTgwMDY2OGM3Y2RiM2VlOTdlZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpdYEp+i+6S+XrbMZqbvkRh9LVmg
yTaaFIxq+grWFGrVym4UtapQghP4FZkojbbVk5JLK+6fWUJxYnMiYN8jkNCBxq8j
5VZeIGIpM10dqMoKQa4MllTQP4FUALci2fe9LYHIRsO8RWEENnQzpgzIK/u+XktN
n/4ESFDmU2xFMANr+tNsDI68fv1eEGv4Yyqrrpn8g9tZxMHLB/QNZm0AvXxDpdWF
8JZXaiVRhf2wMdoT3mdZrU2pccTSSmS6IbjL4YgQZPtUEc223Qr8Okb6swNugarn
shML6orp9P/1KXvUQAFjAiQiyZyCQ1ywEu7tmR4UsLQqQjHEvu0WnOfcCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAqMToDU0dnGwmABmjHzbPul+2jMB8GA1UdIwQY
MBaAFB3cU9Heei736yuQyAkVVEFABCSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEt
NDg2NzFmYjdkMzgwLzEvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEtNDg2NzFmYjdkMzgw
LzEvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDA8Fnl6
hAl/zBYA3Ztw0HC2Fi9oYzOHLeQNmN4zYafTtTVusuZFmkzM+bo+fpmq9uLoqibg
xfLDFBv0I4d5Pzy+Zghr5pooQ+nr2GxHjLbXVVPitybQa9+IAC+aC9cg0u84Ubk3
dDKVyxTd+V31vVNm6Xe3HmR2vLO5PcQ4/ZFxxkSx3EMMG74bvMH3igLlKQoeRkGs
cE1B/BDkTH1Ig/TIrbKhA4pd2a1Wem0h6PMMF1QDzyIXvFdWLOXqHyDNEIRhRWIE
ZG/gDWbPeKBUJj5U3k+yKfCl53lqpdCiWABKiOIAY27H4wbZiQxAdN8IGkSNsqIe
OaMvEQ7+lkIc/g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:34 2026 by rpki-client